Southern New Hampshire University

ACC-705: Advanced Topics in Information Systems and Controls

A study guide to SNHU's graduate course in the Information Systems and Controls path, aligned with the ISC discipline of the CPA exam.

Updated October 2026 · 5 min read

ACC-705, Advanced Topics in Information Systems and Controls, is a graduate course at Southern New Hampshire University.

SNHU lists it in the Information Systems and Controls path of its CPA certificate programs, alongside ACC-640 Auditing, ACC-676 Audit of Accounting Information Systems and ACC-677 Information System Assurance and Advising.

SNHU states that these certificates were aligned to the discipline areas of the 2024 CPA exam, so ACC-705 sits close to the ISC (Information Systems and Controls) discipline.

The course is challenging because it asks accountants to think like technology risk professionals. You need to understand how data moves through systems, where it can be lost, changed or exposed, and which controls give reasonable assurance, then explain all of that in language a finance audience understands.

Course at a Glance

ItemDetails
UniversitySouthern New Hampshire University (SNHU)
Course codeACC-705
LevelGraduate
Program pathInformation Systems and Controls certificate path
CPA alignmentClose to the ISC discipline of the CPA exam
Typical workCase analyses, control evaluations, research papers

ISC Areas the Course Relates To

The CPA exam's ISC discipline is organized around three broad areas. These are a useful map for the kinds of topics an advanced systems and controls course explores; your syllabus gives ACC-705's exact content.

ISC areaWhat it covers in practice
Information systems and data managementIT infrastructure, business processes, data governance, data integrity and availability
Security, confidentiality and privacyThreats, access controls, incident response, and protecting personal and confidential data
SOC engagementsPlanning and performing System and Organization Controls engagements and using their reports

Key Concepts Explained

Defense in Depth

No single control stops every threat. Organizations layer preventive, detective and corrective controls so that if one fails, another catches the problem. A good analysis identifies which layer each control belongs to and where gaps remain.

Example: A finance system uses passwords (preventive). Adding multi-factor authentication strengthens prevention, logging failed logins adds detection, and a tested incident response plan adds correction. If logs exist but nobody reviews them, the detective layer exists on paper only.

Data Integrity Across Interfaces

Many reporting errors start where two systems exchange data. Controls such as record counts, control totals and reconciliations confirm that what left one system arrived complete and unchanged in the other.

Example: A payroll system sends a file to the general ledger. The file carries a record count of 1,250 and a hash total. The ledger import checks both; a mismatch stops the posting and alerts the payroll team before the error reaches the financial statements.

SOC 1 Versus SOC 2

A SOC 1 report addresses controls at a service organization relevant to a user entity's financial reporting. A SOC 2 report addresses controls relevant to security, availability, processing integrity, confidentiality or privacy. Type 1 reports cover design at a point in time; Type 2 reports also cover operating effectiveness over a period.

Governance and Frameworks

Advanced systems and controls work leans on recognized frameworks. COSO's internal control framework gives the overall structure of control environment, risk assessment, control activities, information and communication, and monitoring.

COBIT is widely used for IT governance and management objectives, and the NIST Cybersecurity Framework organizes security activities into functions such as identify, protect, detect, respond and recover. Assignments often reward students who pick one framework, explain why it fits the case and apply it consistently, rather than mentioning several in passing.

Typical Assignments and How to Approach Them

Assignment typeWhat it testsHow to approach
Control evaluationDesign and operationMap risks to controls, then test whether each control would work
Data flow analysisUnderstanding of systemsDraw the flow first and mark every hand-off point
SOC report reviewUsing assurance reportsCheck scope, period, exceptions and user entity controls
Research paperEmerging risksFocus on one technology and its control implications

Where Students Get Stuck

Study Tips for ACC-705

How We Help with ACC-705

Send the assignment prompt, case materials, rubric and any feedback. A writer with IT audit and controls knowledge can explain concepts, prepare a custom analysis for reference, or review your draft for gaps. Our accounting assignment help guide covers other accounting modules.

GradeEssays is independent of Southern New Hampshire University. Our work is tutoring and reference only: use it to understand the material, then complete and submit your own work under SNHU's academic integrity policy. Every order is written from scratch with free revisions within the scope of your original request.

Get on Top of ACC-705

Share the prompt and your draft. We prepare an explained custom analysis of the controls and risks involved.

Start My ACC-705 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

Where does ACC-705 fit in SNHU's programs?

SNHU lists ACC-705 in the Information Systems and Controls path of its CPA certificates, with ACC-640, ACC-676 and ACC-677.

Is ACC-705 the same as the CPA ISC exam?

No. It is a university course. SNHU says its CPA certificates were aligned to the 2024 CPA exam discipline areas, so the topics overlap with ISC.

Do I need a technology background?

It helps, but the focus is on controls and risk. Understanding how systems process data matters more than coding.

What is the difference between a Type 1 and Type 2 SOC report?

Type 1 covers the design of controls at a point in time; Type 2 also tests whether they operated effectively over a period.

Which framework should I use in an assignment?

Use the one your instructor specifies. Otherwise, COSO for internal control, COBIT for IT governance, or NIST for cybersecurity, depending on the question.

Can you review my ACC-705 paper?

Yes. Send the draft and rubric and we will explain how to strengthen the analysis.